Privacy Policy

Last updated: May 2026 · Compliant with the Nigeria Data Protection Act (NDPA) 2023 and NDPR

1. Introduction

Itoju ("Itoju," "we," "us," "our"), operated by EqualyzAI, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered RMNCHN (Reproductive, Maternal, Newborn, Child Health and Nutrition) health companion.

By using Itoju, you consent to the data practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We collect the following categories of information:

Account Information

  • Full name, email address, and password (hashed)
  • Age, language preference, and location (state/region in Nigeria)
  • Onboarding profile details (e.g., pregnancy status, health concerns)

Chat & Voice Data

  • Text messages you send to Itoju
  • Voice recordings submitted for transcription
  • AI-generated responses delivered to you
  • Chat session timestamps and session IDs

Health Tool Usage

  • Data entered into health tools (e.g., cycle tracker, immunization tracker, ANC tracker, pregnancy timeline, ovulation window)
  • Computed results and health summaries generated from your inputs

Technical & Usage Data

  • Device type, browser, and operating system
  • IP address and general location
  • Pages visited, features used, and interaction timestamps
  • Error logs and performance diagnostics

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Itoju service
  • Personalise health information to your language, region, and profile
  • Generate AI responses to your health questions in your preferred language (English, Yoruba, Hausa, Igbo, or Pidgin)
  • Send OTP verification and account-related communications
  • Track escalations and ensure follow-up for high-risk health concerns
  • Analyse anonymised usage trends to improve maternal and child health outcomes in Nigeria
  • Comply with applicable laws and regulations, including the Nigeria Data Protection Regulation (NDPR)

4. Legal Basis for Processing

We process your personal data under the following legal bases as recognised by the Nigeria Data Protection Act (NDPA) 2023 and NDPR:

  • Consent — you have given clear consent for us to process your data for specified purposes
  • Contract — processing is necessary to provide the services you requested
  • Legitimate interests — to improve our services and ensure platform security, where your rights are not overridden
  • Legal obligation — where we are required to process data to comply with Nigerian law

5. Data Sharing & Third Parties

We do not sell your personal data. We may share data only in the following circumstances:

  • Service providers: Trusted vendors (cloud infrastructure, AI model providers, analytics) who process data on our behalf under strict confidentiality agreements
  • Emergency escalations: Where a health emergency is detected, anonymised or consented data may be shared with relevant healthcare facilities
  • Legal requirements: Where required by Nigerian law, court order, or regulatory authority
  • Business transfers: In the event of a merger or acquisition, your data may be transferred with appropriate notice

6. Voice & Audio Data

Voice recordings you submit are transcribed using AI and are stored temporarily to process your query. Processed audio responses generated by Itoju may be cached locally in your browser (via IndexedDB) to improve performance and avoid redundant processing.

We do not use your voice data to build biometric profiles or share it with third parties beyond transcription service providers.

7. Health Information

Health-related information you share with Itoju is treated with the highest level of sensitivity. It is used solely to provide you with relevant health guidance and is never shared with advertisers or commercial third parties.

We apply additional safeguards to health data in line with the NDPR's requirements for sensitive personal data.

8. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide our services. Chat history and health tool records are retained to enable continuity of care.

You may request deletion of your account and associated data at any time by contacting us. Certain data may be retained in anonymised form for public health research purposes.

9. Your Rights

Under the NDPA 2023 and NDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Withdraw consent at any time without affecting prior lawful processing
  • Object to or restrict certain types of processing
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, contact us at sales@equalyz.ai.

10. Cookies & Local Storage

Itoju uses browser cookies and localStorage to maintain your session, remember your language preferences, and store authentication tokens. We do not use third-party advertising cookies.

You can clear cookies and local storage through your browser settings, though this may affect your ability to stay logged in.

11. Children's Privacy

Itoju is intended for users aged 18 and above. Users under 18 may only use the service with parental or guardian consent. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will promptly delete it.

12. Security

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), hashed passwords, access controls, and regular security reviews.

Despite these measures, no system is entirely secure. We encourage you to keep your login credentials confidential and notify us immediately of any suspected unauthorised access.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of significant changes via email or an in-app notice. Continued use of Itoju after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

For privacy-related questions, data subject requests, or concerns, please contact our Data Protection Officer at sales@equalyz.ai.